-/*
- * Copyright (c) 2001-2003,2011,2014 Apple Inc. All Rights Reserved.
- *
- * The contents of this file constitute Original Code as defined in and are
- * subject to the Apple Public Source License Version 1.2 (the 'License').
- * You may not use this file except in compliance with the License. Please
- * obtain a copy of the License at http://www.apple.com/publicsource and
- * read it before using this file.
- *
- * This Original Code and all software distributed under the License are
- * distributed on an 'AS IS' basis, WITHOUT WARRANTY OF ANY KIND, EITHER
- * EXPRESS OR IMPLIED, AND APPLE HEREBY DISCLAIMS ALL SUCH WARRANTIES,
- * INCLUDING WITHOUT LIMITATION, ANY WARRANTIES OF MERCHANTABILITY,
- * FITNESS FOR A PARTICULAR PURPOSE, QUIET ENJOYMENT OR NON-INFRINGEMENT.
- * Please see the License for the specific language governing rights and
- * limitations under the License.
- */
-
-/*
- File: cuCdsaUtils.h
-
- Description: common CDSA access utilities
-
- Author: dmitch
-*/
-
-#ifndef _COMMON_CDSA_UTILS_H_
-#define _COMMON_CDSA_UTILS_H_
-
-#include <Security/cssm.h>
-#include <Security/SecKeychain.h>
-
-#ifdef __cplusplus
-extern "C" {
-#endif
-
-/* common memory allocators shared by app and CSSM */
-extern void * cuAppMalloc (CSSM_SIZE size, void *allocRef);
-extern void cuAppFree (void *mem_ptr, void *allocRef);
-extern void * cuAppRealloc (void *ptr, CSSM_SIZE size, void *allocRef);
-extern void * cuAppCalloc (uint32 num, CSSM_SIZE size, void *allocRef);
-
-#define APP_MALLOC(s) cuAppMalloc(s, NULL)
-#define APP_FREE(p) cuAppFree(p, NULL)
-#define APP_REALLOC(p, s) cuAppRealloc(p, s, NULL)
-#define APP_CALLOC(n, s) cuAppRealloc(n, s, NULL)
-
-extern CSSM_BOOL cuCompareCssmData(
- const CSSM_DATA *d1,
- const CSSM_DATA *d2);
-
-/* OID flavor of same, which will break when an OID is not a CSSM_DATA */
-#define cuCompareOid(o1, o2) cuCompareCssmData(o1, o2)
-
-void cuPrintError(const char *op, CSSM_RETURN err);
-
-/* Init CSSM; returns CSSM_FALSE on error. Reusable. */
-extern CSSM_BOOL cuCssmStartup();
-
-/* Attach to CSP. Returns zero on error. */
-extern CSSM_CSP_HANDLE cuCspStartup(
- CSSM_BOOL bareCsp); // true ==> CSP, false ==> CSP/DL
-
-/* Attach to DL side of CSPDL. */
-extern CSSM_DL_HANDLE cuDlStartup();
-
-/* Attach to CL, TP */
-extern CSSM_CL_HANDLE cuClStartup();
-extern CSSM_TP_HANDLE cuTpStartup();
-
-/* Open a DB, ensure it's empty. */
-CSSM_DB_HANDLE cuDbStartup(
- CSSM_DL_HANDLE dlHand, // from dlStartup()
- const char *dbName);
-
-/* Attach to existing DB or create an empty new one. */
-CSSM_DB_HANDLE cuDbStartupByName(CSSM_DL_HANDLE dlHand,
- char *dbName,
- CSSM_BOOL doCreate,
- CSSM_BOOL quiet);
-
-/* detach and unload */
-CSSM_RETURN cuCspDetachUnload(
- CSSM_CSP_HANDLE cspHand,
- CSSM_BOOL bareCsp); // true ==> CSP, false ==> CSP/DL
-CSSM_RETURN cuClDetachUnload(
- CSSM_CL_HANDLE clHand);
-CSSM_RETURN cuDlDetachUnload(
- CSSM_DL_HANDLE dlHand);
-CSSM_RETURN cuTpDetachUnload(
- CSSM_TP_HANDLE tpHand);
-/*
- * Derive symmetric key using PBE.
- */
-extern CSSM_RETURN cuCspDeriveKey(CSSM_CSP_HANDLE cspHand,
- uint32 keyAlg, // CSSM_ALGID_RC5, etc.
- const char *keyLabel,
- unsigned keyLabelLen,
- uint32 keyUsage, // CSSM_KEYUSE_ENCRYPT, etc.
- uint32 keySizeInBits,
- CSSM_DATA_PTR password, // in PKCS-5 lingo
- CSSM_DATA_PTR salt, // ditto
- uint32 iterationCnt, // ditto
- CSSM_KEY_PTR key);
-
-/*
- * Generate key pair of arbitrary algorithm.
- */
-extern CSSM_RETURN cuCspGenKeyPair(CSSM_CSP_HANDLE cspHand,
- CSSM_DL_DB_HANDLE *dlDbHand, // optional
- uint32 algorithm,
- const char *keyLabel,
- unsigned keyLabelLen,
- uint32 keySize, // in bits
- CSSM_KEY_PTR pubKey, // mallocd by caller
- CSSM_KEYUSE pubKeyUsage, // CSSM_KEYUSE_ENCRYPT, etc.
- CSSM_KEYATTR_FLAGS pubAttrs, // CSSM_KEYATTR_EXTRACTABLE, etc.
- CSSM_KEY_PTR privKey, // mallocd by caller
- CSSM_KEYUSE privKeyUsage, // CSSM_KEYUSE_DECRYPT, etc.
- CSSM_KEYATTR_FLAGS privAttrs); // CSSM_KEYATTR_EXTRACTABLE, etc.
-
-/* Convert a reference key to a raw key. */
-CSSM_RETURN cuRefKeyToRaw(CSSM_CSP_HANDLE cspHand,
- const CSSM_KEY *refKey,
- CSSM_KEY_PTR rawKey); // RETURNED
-
-/*
- * Add a certificate to a keychain.
- */
-CSSM_RETURN cuAddCertToKC(
- SecKeychainRef keychain,
- const CSSM_DATA *cert,
- CSSM_CERT_TYPE certType,
- CSSM_CERT_ENCODING certEncoding,
- const char *printName, // C string
- const CSSM_DATA *keyLabel); // ??
-
-/*
- * Convert a CSSM_DATA_PTR, referring to a DER-encoded int, to an
- * unsigned.
- */
-unsigned cuDER_ToInt(
- const CSSM_DATA *DER_Data);
-
-/*
- * Verify a CRL against system anchors and intermediate certs.
- */
-CSSM_RETURN cuCrlVerify(
- CSSM_TP_HANDLE tpHand,
- CSSM_CL_HANDLE clHand,
- CSSM_CSP_HANDLE cspHand,
- const CSSM_DATA *crlData,
- CSSM_DL_DB_HANDLE_PTR certKeychain, // intermediate certs
- const CSSM_DATA *anchors, // optional - if NULL, use Trust Settings
- uint32 anchorCount);
-
-#ifdef __cplusplus
-}
-#endif
-
-#endif /* _COMMON_CDSA_UTILS_H_ */
projects / apple / security.git / blobdiff